Re: System Shutdowns

From: Larry Samuels MS-MVP XP \(Shell/User\) (larry_at_mvps.org)
Date: 09/01/03


Date: Sun, 31 Aug 2003 20:59:17 -0400


Go to http://www.kellys-korner-xp.com/xp_qr.htm#rpc and download the removal
tool.
Run the tool to remove the worm,then follow the onscreen prompts to download
the patch.
Make sure you download the 32bit patch if you are running XP.

There are more variants out now.
The exes for 2 of the variants are teekids.exe and penis32.exe
Kelly's script kills all known variants.
As more variants are found Kelly and Doug are adding removal instructions to
the script to kill them as well.

If you are having trouble staying up to get the patch and removal tool:
When the shutdown prompt appears,go to start/run and type
shutdown -a to abort the shutdown process to allow you to stay up and
online.

-- 
Larry Samuels MS-MVP  (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/expertzone
"Dean Wencl" <Cayman44@prodigy.net> wrote in message
news:049e01c36feb$29709e70$a001280a@phx.gbl...
> I am experiencing numerous regular shutdowns with the
> following. "This shutdown was initiated by NT
> AUTHORITY\SYSTEM"   Time before shutdown:  00:00:59
>
> Message
>  Windows must now restart because the Remote Procedure
> Call (RPC) service terminated unexpectedly
>
> What is wrong with my system, We have never had this
> trouble before I used windows updates and McAfee updates.
> What did I do wrong.
>
> Dean


Relevant Pages

  • RE: Blaster Worm Solution
    ... plus the Value "windows auto update" under the ... to download the patch and install it. ... When you are informed of the system shutdown, ... Though this will stop the shutdown, the RPC server has ...
    (microsoft.public.windowsxp.security_admin)
  • Re: LSASS.EXE
    ... Download the patch. ... following when you get the shutdown message. ... You can also scan the system using the below multi AV Command Line Scanner front end utility ...
    (microsoft.public.windowsxp.general)
  • RE: patch
    ... Hi Marilyn, ... Rather than attempting to install this one patch, ... Here is the link to Windows Updates: ... | place to download the patch. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: System shutting down
    ... Run the tool to remove the worm,then follow the onscreen prompts to download ... Make sure you download the 32bit patch if you are running XP. ... When the shutdown prompt appears,go to start/run and type ... > Windows must now restart because the Remote Procedure> Call service was terminated. ...
    (microsoft.public.security.virus)
  • Re: OT: security patch for Windows
    ... There is a windows patch that needs to be applied. ... direct download. ... double-click Turn Off Autoplay ...
    (rec.pets.cats.anecdotes)